Unscored CVE-2005-3383 EUVD-2005-3382GHSA-mvc3-rm7h-27g3

SQL injection vulnerability in Techno Dreams Announcement script allows remote attackers to execute arbitrary SQL commands and bypass authe…

Published Oct 29, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in Techno Dreams Announcement script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp.

References

http://www.kapda.ir/advisory-103.html
15215 vdb-entry
ADV-2005-2222 vdb-entry
20331 vdb-entry
17354 third-party-advisory
20051026 [KAPDA::#9] Techno Dreams Scripts Vulnerabilities mailing-list